Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/4c00a5-81c6-49e7-b5d8-1ab461f64318/1/FfxlAfrx4kvd2IPpJMkDBsbz8QM.roa
File: FfxlAfrx4kvd2IPpJMkDBsbz8QM.roa (raw, json)
Hash identifier: bJqRpIyhESZWyM30c+GssBmdWlM4F6IoectXTSXeDhU=
Subject key identifier: 15:FC:65:01:FA:F1:E2:4B:DD:D8:83:E9:24:C9:03:06:C6:F3:F1:03
Certificate issuer: /CN=5e09c0a07411c94730e0d2f2da08ab97963adb5b
Certificate serial: 1C60282F
Authority key identifier: 5E:09:C0:A0:74:11:C9:47:30:E0:D2:F2:DA:08:AB:97:96:3A:DB:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgnAoHQRyUcw4NLy2girl5Y621s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/4c00a5-81c6-49e7-b5d8-1ab461f64318/1/FfxlAfrx4kvd2IPpJMkDBsbz8QM.roa
Signing time: Sat 01 Jan 2022 04:52:31 +0000
ROA not before: Sat 01 Jan 2022 04:52:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3257
IP address blocks: 212.26.203.0/24 maxlen: 24
185.116.13.0/24 maxlen: 24
217.8.103.0/24 maxlen: 24
212.19.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 476063791 (0x1c60282f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e09c0a07411c94730e0d2f2da08ab97963adb5b
Validity
Not Before: Jan 1 04:52:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=15fc6501faf1e24bddd883e924c90306c6f3f103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:52:b6:2a:f4:9b:43:1b:ef:93:46:61:51:e1:
94:d6:4b:94:6a:1d:ab:d2:0d:22:80:64:44:91:5a:
ab:7e:44:3f:8b:ab:55:9f:90:ef:c8:c8:87:66:2f:
4d:e2:1a:87:0c:19:8a:97:f9:3e:0e:9c:77:10:9e:
05:fa:b0:e6:7a:a2:f4:ed:cc:ea:68:75:7b:36:c6:
7d:1a:fe:29:48:3e:a4:e9:0a:ba:86:01:2b:ba:73:
98:b4:7f:ed:f8:da:af:9f:f3:ff:cf:e8:76:d1:4f:
c3:60:cd:1f:3b:6f:46:4f:9b:62:7e:06:fc:42:05:
31:18:ac:dc:7b:cd:4d:01:a8:a5:cb:e3:18:1c:4b:
ea:7c:a2:fa:b8:5c:13:ad:b5:97:9d:50:5d:c8:3f:
06:30:3d:c8:dc:78:4f:52:c1:2e:39:60:ce:7f:c1:
22:44:4f:8c:e6:3c:52:65:b6:76:2a:89:82:b2:c7:
c4:d8:bb:47:fb:42:f3:5c:4d:4e:74:ae:e3:77:2a:
7d:22:09:49:23:59:3a:5d:29:12:77:f4:dc:13:78:
b3:6a:b9:96:c5:f9:05:d8:26:c7:43:ee:9a:10:5f:
72:5d:70:60:7e:18:6a:c7:e3:60:b6:48:d2:2a:35:
9b:b6:95:e9:5f:60:f7:28:27:ae:a2:8c:85:ab:c5:
33:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:FC:65:01:FA:F1:E2:4B:DD:D8:83:E9:24:C9:03:06:C6:F3:F1:03
X509v3 Authority Key Identifier:
keyid:5E:09:C0:A0:74:11:C9:47:30:E0:D2:F2:DA:08:AB:97:96:3A:DB:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgnAoHQRyUcw4NLy2girl5Y621s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4c00a5-81c6-49e7-b5d8-1ab461f64318/1/FfxlAfrx4kvd2IPpJMkDBsbz8QM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4c00a5-81c6-49e7-b5d8-1ab461f64318/1/XgnAoHQRyUcw4NLy2girl5Y621s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.116.13.0/24
212.19.211.0/24
212.26.203.0/24
217.8.103.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:8d:e7:a4:0f:b7:36:75:78:ac:40:0c:c4:70:4f:c1:9d:66:
1d:01:e0:a8:58:fb:b5:44:d1:c1:97:ec:5e:a8:05:fa:cd:67:
86:9a:25:32:8c:b9:59:5e:2e:8d:dd:8c:ab:5d:68:b5:25:9c:
fd:39:51:ca:c0:e4:c9:41:22:d7:50:4f:56:25:b9:ce:d0:ab:
e7:6f:2b:54:50:bc:cc:dc:26:e2:3f:0f:63:5a:aa:be:30:8a:
eb:01:98:73:2a:33:d6:20:f3:81:15:00:f2:81:96:29:30:11:
da:f7:ae:ad:2c:e4:b7:43:60:68:b0:83:d8:cf:5f:36:83:38:
23:e8:a3:92:bd:d8:6b:5f:42:a0:7e:b3:e2:fb:4a:20:10:67:
95:bc:f6:44:ec:61:3a:8b:6f:95:48:e0:45:83:09:e2:07:02:
ed:f9:11:83:42:a7:59:ba:21:98:86:61:4a:1a:06:8e:16:9b:
e5:37:6c:65:f1:02:de:a4:aa:81:3a:c1:79:5c:0c:ca:7f:60:
23:08:18:33:7c:ff:4f:c1:a4:5e:f8:ae:ad:c3:e4:1d:e7:83:
d8:14:2e:2f:a3:ed:55:5c:fd:f2:5d:9d:ad:38:f5:54:58:a6:
1f:a9:e5:66:3b:1b:5c:de:53:4b:5d:97:47:6f:3a:ff:7f:21:
bb:6a:15:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:38 2023 by rpki-client on console.sobornost.net